$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7f6cd5-c35b-4fca-ba21-e9855ddd0172.roa File: 3c7f6cd5-c35b-4fca-ba21-e9855ddd0172.roa (raw, json) Hash identifier: 72ugy/POapQk2TrhhSur4kLai2KbGpYnBzihmUhweJw= Subject key identifier: 32:55:93:7E:BE:C6:85:46:93:F5:10:77:CA:35:5B:CB:14:3C:31:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26091103C34C5C994E985076BDF03D2913ADC865 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7f6cd5-c35b-4fca-ba21-e9855ddd0172.roa Signing time: Fri 21 Mar 2025 00:11:54 +0000 ROA not before: Fri 21 Mar 2025 00:11:54 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:09:11:03:c3:4c:5c:99:4e:98:50:76:bd:f0:3d:29:13:ad:c8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:11:54 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:d9:e8:7d:c0:97:d0:bb:39:45:08:e8:bd: cc:06:c7:3a:44:d6:6d:c8:30:d9:d5:8b:7d:f6:04: 39:dd:92:d1:27:96:cd:54:b7:da:5c:20:1c:aa:00: 02:2d:1d:b1:37:0c:f9:3f:2f:b2:51:15:52:73:fe: 47:f7:67:0c:86:38:98:f6:8c:85:33:81:40:00:41: e6:c6:d3:53:78:80:b0:f5:97:ea:af:c7:d8:0e:70: 6b:6f:a0:d4:b5:d8:b7:fe:dc:05:22:03:15:1c:49: 6d:60:fe:fa:fd:c1:64:30:cb:ab:e6:a3:59:34:5c: 5e:fe:cd:e1:4e:f1:2c:b0:b9:e5:f9:dd:97:12:2b: 5f:fc:dd:81:64:b6:34:88:5e:38:0e:3d:be:9a:c9: 3b:e7:f5:4a:fb:6e:66:08:e2:17:83:1c:af:4c:f3: c0:9f:d3:7d:0d:ba:1e:f0:a8:25:e8:24:f8:22:03: 83:36:d0:8a:56:3b:4a:2b:01:f0:c2:05:09:cb:33: 21:9b:a5:9a:78:2b:39:a6:06:e1:11:65:79:a9:b6: 67:42:48:7e:16:8b:42:e5:fb:18:f5:ff:18:3d:30: 23:d0:02:37:2e:c7:5d:b8:56:33:a1:da:e3:18:fe: 2f:0b:c7:6c:3f:49:84:28:6f:04:9c:a7:49:ea:a6: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:55:93:7E:BE:C6:85:46:93:F5:10:77:CA:35:5B:CB:14:3C:31:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7f6cd5-c35b-4fca-ba21-e9855ddd0172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:4000::/39 Signature Algorithm: sha256WithRSAEncryption 73:78:db:14:f2:2b:e6:f0:d6:db:72:1f:88:d8:95:af:cd:0f: ce:9e:5d:0f:60:af:7a:b2:95:d2:65:72:8b:cb:16:8c:35:61: 12:c2:0d:56:7e:8a:86:7a:1c:20:f9:40:7b:e5:27:1b:cd:6a: 24:6b:60:cb:7b:95:2f:10:32:0c:33:38:5d:32:8d:ca:28:14: bd:c1:8a:62:75:6d:eb:92:83:63:0c:85:b8:f2:8d:71:a1:e8: df:11:54:90:43:76:4d:44:95:82:9c:da:b7:30:82:d8:c0:c1: 88:8a:8c:f7:0e:16:84:b1:f9:4d:ca:b0:b2:51:6d:df:ca:4b: 7e:03:09:44:1e:84:29:d4:20:5d:3e:9c:9a:d6:a9:cd:4f:dc: 3c:9c:0a:a4:f7:6b:cd:f1:be:bb:d4:3b:76:52:57:27:29:39: 7b:a3:82:89:10:df:d9:27:eb:11:16:9e:25:71:ff:c6:23:f4: 53:8d:b8:36:8e:af:11:f0:f9:4a:e2:b1:b7:6d:86:3a:4f:2c: 65:4c:0a:68:d7:b5:b4:02:5b:bb:e1:3e:9c:3a:30:c0:d0:16: 57:0f:3f:ef:0f:8b:7c:73:61:1a:64:bd:78:d6:8d:e1:2b:f7: 8c:95:46:b5:a5:cf:91:4f:9c:b8:ec:a9:e2:67:6f:95:77:a5: c8:41:ab:ae -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJgkRA8NMXJlOmFB2vfA9KROtyGUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDAxMTU0WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmExNTFlMTk1NDBjZDA5OTRmNjU1NTNhODVmMGYxZWMw ZmUwNGIzYTFkNDg4NDEwOTMyNWRhYTBjZGY3MjBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeRNnofcCX0Ls5RQjovcwGxzpE1m3IMNnVi332BDndktEn ls1Ut9pcIByqAAItHbE3DPk/L7JRFVJz/kf3ZwyGOJj2jIUzgUAAQebG01N4gLD1 l+qvx9gOcGtvoNS12Lf+3AUiAxUcSW1g/vr9wWQwy6vmo1k0XF7+zeFO8SywueX5 3ZcSK1/83YFktjSIXjgOPb6ayTvn9Ur7bmYI4heDHK9M88Cf030Nuh7wqCXoJPgi A4M20IpWO0orAfDCBQnLMyGbpZp4KzmmBuERZXmptmdCSH4Wi0Ll+xj1/xg9MCPQ Ajcux124VjOh2uMY/i8Lx2w/SYQobwScp0nqpv+xAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMlWTfr7GhUaT9RB3yjVbyxQ8MZIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjN2Y2Y2Q1LWMzNWItNGZjYS1iYTIxLWU5ODU1ZGRkMDE3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9gQDANBgkqhkiG9w0BAQsFAAOCAQEAc3jbFPIr5vDW23IfiNiVr80P zp5dD2CverKV0mVyi8sWjDVhEsINVn6KhnocIPlAe+UnG81qJGtgy3uVLxAyDDM4 XTKNyigUvcGKYnVt65KDYwyFuPKNcaHo3xFUkEN2TUSVgpzatzCC2MDBiIqM9w4W hLH5TcqwslFt38pLfgMJRB6EKdQgXT6cmtapzU/cPJwKpPdrzfG+u9Q7dlJXJyk5 e6OCiRDf2SfrERaeJXH/xiP0U424No6vEfD5SuKxt22GOk8sZUwKaNe1tAJbu+E+ nDowwNAWVw8/7w+LfHNhGmS9eNaN4Sv3jJVGtaXPkU+cuOyp4mdvlXelyEGrrg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:08 2025 by rpki-client